migrate-to-access-entry handling of managed node groups

[joebowbeer]

Is migrate-to-access-entry working as expected for managed node groups?

The migration docs say to create access entries for everything in aws-auth except the managed node group entry(s) created for Fargate or Managed Node Groups.

In the example output, you would create access entries for all entries except the last two entries, since those entries were created by Amazon EKS for a Fargate profile and a managed node group.

However, when I run migrate-to-access-entry on my cluster with a managed node group, creating an access entry for principal ARN managed-node-group-role is among the listed actions.